Description
Novell Client for Windows 4.8 and 4.9 does not restrict access to the clipboard contents while a machine is locked, which allows users with physical access to read the current clipboard contents by pasting them into the "User Name" field on the login prompt.
Affected products
- Novell / client4.8 – 4.8
- Novell / client4.9 – 4.9
References
- VENDOR_ADVISORYhttp://secunia.com/advisories/20194
- MISChttp://www.securityfocus.com/archive/1/434704/100/0/threaded
- MISChttp://www.osvdb.org/25760
- MISChttp://securityreason.com/securityalert/961
- MISChttp://www.securityfocus.com/archive/1/434724/100/0/threaded
- MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/26595
Updated 19m ago · 8 sources